Transparent COM instrumentation for malware analysis

COM automation is a core Windows technology that allows code to access external functionality through well-defined interfaces. It is similar to traditionally loading a DLL, but is class-based rather than function-based. Many advanced Windows capabilities are exposed through COM, such as Windows...

EUVD-2018-1632

Malware in sbrugna...

EUVD-2018-1654

Malware in sbrugna...

EUVD-2021-13240

Malware in sbrugna...

EUVD-2018-1675

Malware in sbrugna...

EUVD-2023-40001

Malicious code in bioql PyPI...

EUVD-2022-44361

Malicious code in bioql PyPI...

Patch Tuesday - May 2025

Microsoft is addressing 77 vulnerabilities this May 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for five of the vulnerabilities published today, and these are already reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for two...

VulnCheck KEV: CVE-2025-30397

Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL...

CVE-2024-43584

Windows Scripting Engine Security Feature Bypass Vulnerability...

CVE-2024-43584

Windows Scripting Engine Security Feature Bypass Vulnerability...

CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability

...

CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability

...

CVE-2024-43584

CVE-2024-43584 affects Windows Scripting Engine and is described as a Security Feature Bypass. Public sources in connected docs identify Microsoft as the vendor and Windows Scripting as the affected component, with root cause framed as a bypass of a security feature and impact described as circum...

Windows Scripting Engine Security Feature Bypass Vulnerability

...

Microsoft Windows Scripting 安全漏洞

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft USA. A security vulnerability exists in Microsoft Windows Scripting. An attacker exploiting this vulnerability could bypass certain functionality. The following products and editions are...

VulnCheck KEV: CVE-2024-38178

Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL...

Microsoft Windows Scripting Security Vulnerability

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Scripting. An attacker exploiting this vulnerability could bypass certain features. The following products and editions are...

CVE-2023-36017

Windows Scripting Engine Memory Corruption Vulnerability...

CVE-2023-36017

Windows Scripting Engine Memory Corruption Vulnerability...